Would it be a good idea to assign schg to any files or direcotries after a fresh install of 5.0 to ensure they aren't mistakingly or intentionally altered? Also do most admins set up Tripwire on fresh installs?

Like CVS, used with OpenBSD source and the Project's web pages, git is a version control system. I chose it for /etc and /var because unlike CVS, it manages file modes and ownerships, which are needed. It is far more powerful, but I'm not using that power.